Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/jRqOHNERNVALAkvr0tmFABf4xYM.roa
File: jRqOHNERNVALAkvr0tmFABf4xYM.roa (raw, json)
Hash identifier: a1NtvAwVBZcuOGilo7r3ZyU8mN8ezGjfJJZWKGUpFe8=
Subject key identifier: 8D:1A:8E:1C:D1:11:35:50:0B:02:4B:EB:D2:D9:85:00:17:F8:C5:83
Certificate issuer: /CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085
Certificate serial: 018CC794CBE6BDBE86D89D68880CD53FC222
Authority key identifier: 7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/jRqOHNERNVALAkvr0tmFABf4xYM.roa
Signing time: Tue 02 Jan 2024 00:31:06 +0000
ROA not before: Tue 02 Jan 2024 00:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197604
IP address blocks: 91.230.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:cb:e6:bd:be:86:d8:9d:68:88:0c:d5:3f:c2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085
Validity
Not Before: Jan 2 00:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d1a8e1cd11135500b024bebd2d9850017f8c583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:70:ec:c0:56:53:29:4e:c0:4a:b5:9e:55:
32:ef:b8:80:33:ce:33:f5:29:f5:04:72:39:3d:51:
c0:6b:21:fa:5d:fe:a6:28:24:4f:79:ff:09:27:0b:
3f:33:9e:1b:48:91:50:90:b6:45:6c:f2:f7:f3:da:
e5:f8:c5:f4:7d:9b:b7:9e:91:d2:2f:e2:8d:19:3f:
b8:ed:73:8c:a1:61:fb:b1:9b:07:81:56:50:c9:28:
b9:46:e7:80:4b:95:b3:e9:b8:07:40:6e:69:34:42:
28:18:85:7e:2c:a9:a5:10:4e:b2:eb:a5:db:b9:85:
7d:6d:d4:69:a0:11:39:54:a6:6b:cc:c6:0f:50:15:
fd:d5:62:5a:c1:f1:74:07:af:05:e0:ac:ab:3e:b9:
10:57:2c:52:cb:c2:7a:ac:03:81:80:28:52:1d:9f:
95:d1:c5:5c:f2:81:97:49:e0:25:1b:7e:53:30:e9:
7e:c6:11:1e:84:ee:83:12:ae:8f:f4:ca:af:bf:73:
42:5a:22:be:75:9d:c6:65:03:31:e8:c6:ee:bd:c5:
51:5f:4a:aa:d4:66:e3:b2:51:0a:b1:18:66:c4:d3:
d3:dd:25:98:0d:0a:43:70:47:d9:94:93:ee:27:e6:
7a:1d:c4:97:1b:cd:78:8f:da:0b:66:c3:0e:56:27:
19:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1A:8E:1C:D1:11:35:50:0B:02:4B:EB:D2:D9:85:00:17:F8:C5:83
X509v3 Authority Key Identifier:
keyid:7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/jRqOHNERNVALAkvr0tmFABf4xYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.230.0/24
Signature Algorithm: sha256WithRSAEncryption
87:74:8a:97:13:e6:8e:3f:f5:ee:27:1e:5f:77:50:01:20:e8:
35:6d:ed:b6:5f:c7:e1:4f:a8:33:1f:20:b4:95:e2:79:35:a9:
5b:fb:d5:c3:8f:5d:90:32:65:00:b5:86:ad:57:31:3e:a7:f8:
6f:3b:09:e0:9a:6f:38:85:73:0f:a0:6c:2f:c0:ec:6f:1f:21:
94:92:71:c0:1e:73:12:87:96:57:07:53:e6:10:12:27:8f:1e:
64:73:8b:18:94:8f:f3:5a:a9:2a:7d:6b:3a:99:ba:d1:b8:52:
dc:1a:dc:c2:8a:25:10:08:a1:3f:eb:c3:11:cf:14:4b:5b:57:
b7:3b:de:ed:78:af:d3:98:14:5e:87:a0:11:1e:ee:c6:07:f9:
c9:92:d0:a7:b3:2e:5d:eb:55:5e:61:1c:4f:21:fa:5b:56:66:
b9:9a:a0:fc:b3:c8:21:18:c6:65:7a:e7:a0:6a:7f:e2:cc:86:
34:d0:58:0e:b4:02:24:25:42:80:b5:d8:d7:40:0e:bc:66:dc:
7e:cb:b6:7f:97:c6:6f:65:68:1e:1a:0a:82:40:4d:2f:50:39:
b8:93:b7:a2:cb:15:cc:ba:83:26:1f:fe:e4:1f:15:04:3d:69:
a2:47:c3:63:ba:da:27:bf:92:fe:c6:8d:df:e5:1a:4d:01:f2:
c3:cd:d2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:13 2024 by rpki-client on console-ams.rpki-client.org